Bag Carriers
Customer Privacy Policy
Effective Date: June 12, 2026 · Last Updated: July 5, 2026
This policy applies to clients enrolling for Bag Carriers Systems services through bagcarriers.com/enroll or any Bag Carriers operated checkout. If you are an authorized Bag Carriers sales agent using the internal portal app, see our Portal Privacy Policy instead.
This Customer Privacy Policy describes how Bag Carriers LLC ("Bag Carriers," "we," "us," or "our") collects, uses, shares, and protects information when you enroll for and use Bag Carriers Systems services, including website design and build, hosting, client portals, payment integration, and optional AI agent add-ons (collectively, the "Services").
1. SMS & Voice Communications (Calls & Text Messages)
This section governs Bag Carriers' telephone and text-message program and is provided to satisfy mobile carrier (A2P 10DLC) and Telephone Consumer Protection Act (TCPA) requirements. It applies whenever Bag Carriers places phone calls to, or sends SMS/MMS text messages to, prospects, leads, and enrolled clients.
1.1 What Calls and Messages We Send
With your consent, Bag Carriers may contact you by phone call and/or text message for purposes that may include:
- Appointment scheduling, confirmations, and reminders
- Account, billing, enrollment, and service notifications
- Sales follow-ups and responses to inquiries you initiate with us
- Customer support and service updates
- Occasional offers or promotions, only where you have separately opted in to marketing messages
1.2 How We Obtain Your Consent
We only call or text individuals who have given prior express consent. We obtain that consent in one or more of the following ways:
- Web form or enrollment checkbox: you check a clearly labeled opt-in box on a Bag Carriers web form, lead form, or at bagcarriers.com/enroll, shown next to disclosure text describing this program.
- Verbal or in-person: you verbally agree to receive calls or texts during a phone call or meeting, and we record the date and source of that consent.
- Existing business relationship: you provided your phone number to us in the course of doing business (for example, on a signed agreement or project intake form). In that case we send only transactional, service-related messages (not promotional messages) unless you separately opt in.
Consent to receive calls or texts is never a condition of purchasing any goods or services. Message frequency varies based on your account activity and your interactions with us.
1.3 Your Mobile Information Is Never Sold or Shared for Marketing
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.
No mobile information, including your phone number and your SMS opt-in and consent, will be shared with, or sold to, any third parties or affiliates for their marketing or promotional purposes. We disclose phone numbers only to the subprocessors identified in Section 4 that are strictly necessary to deliver our own calls and messages to you (for example, our telephony and messaging carrier). Text-messaging originator opt-in data and consent are expressly excluded from any data sharing and will not be shared with any third parties.
1.4 Opting Out and Getting Help
- To stop texts: reply STOP to any text message from us at any time. You will receive a single confirmation message and then no further texts, unless you opt back in.
- For help: reply HELP to any text, or contact us at frank.lechner@bagcarriers.com or 814-935-0001.
- To stop calls: ask to be placed on our internal Do Not Call list during any call, or contact us using the details above. We honor opt-out requests promptly.
1.5 Rates, Timing, and Delivery
- Message and data rates may apply, depending on your mobile carrier and plan.
- Non-emergency calls and messages are placed only between 8:00 AM and 9:00 PM in your local time zone.
- Message delivery depends on your carrier's network. Mobile carriers are not liable for delayed or undelivered messages.
2. Information We Collect
2.1 Account & Enrollment
- Business information: business name, industry, address, existing website or social profiles.
- Contact information: owner name, email address, and phone number.
- Enrollment details: selected plan tier, AI agent add-ons selected, applied coupon code, agent attribution reference (if any).
- Project intake: desired site URL, target go-live date, requested features, and any notes you provide.
- Signed agreement: your typed electronic signature, the date signed, and your acknowledgements of each agreement term.
2.2 Payment Information
- Card data: entered directly into a secure NMI-hosted iframe on our checkout page. Your card number, expiration, and CVV are never seen by, transmitted to, or stored on Bag Carriers infrastructure.
- Billing zip code: collected for AVS (Address Verification Service) fraud protection.
- Payment tokens: NMI returns a one-time tokenized reference for your card, which we use to authorize the setup charge and set up your recurring monthly retainer.
- Transaction metadata: NMI transaction IDs, subscription IDs, charge amounts, and timestamps are stored for billing reconciliation.
2.3 Business Operations Data
Once your Bag Carriers System is live, we collect and process information you and your customers generate through your system, including:
- Customer records, appointments, bookings, jobs, quotes, invoices, and payments your business creates
- Content you upload (photos, logos, copy)
- Communications routed through your portal (lead form submissions, contact requests)
- If you have AI agent add-ons enabled: the inputs to and outputs from those agents (e.g., quote requests routed to the AI Quote Agent, draft responses generated by the Google Review Responder). AI agent outputs are staged as drafts for your review; see Section 9 of our Terms of Service for details on AI accuracy and customer responsibility.
2.4 Technical Information
- Site analytics: standard page-view, referrer, and aggregate visitor analytics for your site, used to help you understand traffic.
- Device and version information: browser, device type, and operating system for support and debugging.
3. How We Use Your Information
We use the information we collect solely to provide and operate the Services, including to:
- Build, host, and maintain your website and client portal
- Process your setup fee payment and recurring monthly retainer through NMI
- Operate any AI agent add-ons you have purchased
- Communicate with you about your account, scheduled work, support requests, and billing
- Send you a copy of your signed enrollment agreement
- Place phone calls and send SMS/MMS text messages to you where you have consented, as described in Section 1
- Comply with legal obligations (tax records, dispute resolution)
We do not sell your data. We do not use your data or your customers' data to train any third-party machine learning models. We do not use your data for advertising.
4. Third-Party Services (Sub-Processors)
We share specific data with the following service providers, only as necessary to operate the Services. Each provider is contractually obligated to protect your data and use it only to perform their service.
| Provider | Purpose | Data Shared |
|---|
| NMI | Payment processing (setup fee, monthly retainer, and any payments on your site) | Card data (tokenized client-side, never touches our servers), billing zip, transaction amounts, contact name and email |
| Netlify | Website & portal hosting, function execution | All site content and traffic; encrypted in transit |
| Supabase | Database, authentication, file storage (for portals that include a backend) | Business operations data, customer records, file uploads |
| Resend | Outbound email delivery (enrollment confirmations, transactional emails) | Recipient email address and message content |
| Twilio | Telephony & SMS/MMS delivery (calls and text messages) | Recipient phone number and message or call content, solely to deliver our own calls and texts; not used for their marketing |
| Anthropic | AI agent add-ons (Claude models) | Inputs to your enabled AI agents (e.g., quote drafts, review reply drafts). Not retained by Anthropic for training, per their API terms. |
| Google Business Profile (optional) | Google Review Responder add-on | OAuth tokens and review data for your business listing, only if you enable this add-on |
5. Data Storage and Security
Your data is stored in Supabase's and Netlify's managed cloud infrastructure within the United States. We use industry-standard security including:
- HTTPS / TLS encryption for all data in transit
- Encryption at rest for sensitive integration credentials
- Row-level security policies that limit access to your own data
- Service role credentials kept server-side; never exposed to the browser
- PCI-compliant payment processing via NMI; card data is tokenized at entry
6. Data Ownership
You own your business content and customer data. This includes your logos, photos, copy, customer records, appointments, invoices, and any data your customers generate by using your site or portal. Bag Carriers retains ownership only of the underlying website codebase, design system, and any reusable components.
7. Your Rights
You have the right to:
- Access your business data; most of it is visible within your portal
- Correct your data through your portal or by contacting us
- Export all of your business data in a portable format at any time, free of charge
- Cancel your account with 30 days written notice; upon cancellation you receive a full data export within 14 days and the hosted site is decommissioned within 30 days of final billing
- Request deletion of your personal information; business operations data may be retained in anonymized form for legal compliance
To exercise any of these rights, contact us at the address below.
8. Customer Data on Your Site
When your customers interact with your Bag Carriers System (e.g., booking an appointment, submitting a lead form, creating a portal account, making a payment on your site), Bag Carriers acts as a data processor on your behalf. You are the data controller for your customers' information. Bag Carriers does not sell, share, or use your customers' data for any purpose other than operating your site and processing your customers' interactions with it.
9. Data Retention
We retain your enrollment, billing, and business operations data for as long as your account is active. After cancellation:
- Business data export delivered within 14 days
- Hosted site decommissioned within 30 days of final billing
- Personally-attributable data permanently deleted within 90 days, except where retention is required by law (e.g., tax records, payment dispute records)
- Anonymized statistics may be retained indefinitely
10. Children's Information
Bag Carriers Systems are designed for use by adult business owners. We do not knowingly collect personal information from anyone under the age of 13. If your business serves customers under 13 (e.g., a youth sports program), you are responsible for compliance with applicable children's privacy laws (COPPA) on the data your customers provide.
11. International Users
Bag Carriers operates from the United States. By enrolling for the Services, you consent to the transfer and processing of your information in the United States.
12. Changes to This Policy
We may update this Customer Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Material changes will be communicated by email to your account contact.
13. Contact Us
If you have any questions about this Customer Privacy Policy or how we handle your data, please contact us: